Technical information
- Adware.Gexin.2.origin
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) cgi.con####.qq.com:80
- TCP(HTTP/1.1) c-h####.g####.com:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) rs.eas####.com:80
- TCP(HTTP/1.1) and####.b####.qq.com:80
- TCP(HTTP/1.1) larg####.c####.l####.####.com:80
- TCP(HTTP/1.1) 47.94.1####.48:80
- TCP(HTTP/1.1) 1####.190.125.86:8106
- TCP(HTTP/1.1) sdk.o####.p####.####.com:80
- TCP(HTTP/1.1) sni.c####.q####.####.net:80
- TCP(TLS/1.0) jj####.julan####.com:443
- TCP(TLS/1.0) api-####.m####.com:443
- TCP c####.g####.ig####.com:5227
- TCP sdk.o####.t####.####.com:5224
- a####.u####.com
- and####.b####.qq.com
- api-####.m####.com
- app.julan####.com
- c####.g####.ig####.com
- c-h####.g####.com
- cgi.con####.qq.com
- jj####.julan####.com
- l####.tbs.qq.com
- rs.eas####.com
- sdk.c####.ig####.com
- sdk.o####.p####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.com
- sdk.o####.t####.####.net
- wap.cmpass####.com
- cgi.con####.qq.com/qqconnectopen/openapi/policy_conf?sdkv=####&appid=###...
- larg####.c####.l####.####.com/offline_pkg/4208934.zip
- rs.eas####.com/easemob/server.json?sdk_version=####&app_key=####&file_ve...
- sni.c####.q####.####.net/config/hz-hzv3.conf
- a####.u####.com/app_logs
- and####.b####.qq.com/rqd/async?aid=####
- c-h####.g####.com/api.php?format=####&t=####
- l####.tbs.qq.com/ajax?c=####&k=####
- sdk.o####.p####.####.com/api.php?format=####&t=####
- /data/anr/traces.txt
- /data/data/####/.imprint
- /data/data/####/.jg.ic
- /data/data/####/0c546519f302798f101c90db77cfa36a.0.tmp
- /data/data/####/0c546519f302798f101c90db77cfa36a.1.tmp
- /data/data/####/0c8aabf5c2757758bcb952231fd58454.0.tmp
- /data/data/####/0c8aabf5c2757758bcb952231fd58454.1.tmp
- /data/data/####/1002
- /data/data/####/1004
- /data/data/####/8a4b5596b2ad9088e23cf263ea9db5e5.0.tmp
- /data/data/####/8a4b5596b2ad9088e23cf263ea9db5e5.1.tmp
- /data/data/####/Alvin2.xml
- /data/data/####/BUGLY_COMMON_VALUES.xml
- /data/data/####/ContextData.xml
- /data/data/####/bugly_db_-journal
- /data/data/####/c4b142f34c6472dd266453d7291e2116.0.tmp
- /data/data/####/c4b142f34c6472dd266453d7291e2116.1.tmp
- /data/data/####/c746b395c9869eb2e1febebd7274f8a8.0.tmp
- /data/data/####/c746b395c9869eb2e1febebd7274f8a8.1.tmp
- /data/data/####/c8528c844c68ff0c6fa3acfe687e7194.0.tmp
- /data/data/####/c8528c844c68ff0c6fa3acfe687e7194.1.tmp
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/com.julanling.app-journal
- /data/data/####/com.julanling.app.BETA_VALUES.xml
- /data/data/####/com.julanling.app_preferences.xml
- /data/data/####/com.meizu.flyme.push.xml
- /data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
- /data/data/####/com.tencent.open.config.json.1101328984
- /data/data/####/config.json
- /data/data/####/core_info
- /data/data/####/crashrecord.xml
- /data/data/####/device_id.xml.xml
- /data/data/####/dgq.db-journal
- /data/data/####/dgq_sp.xml
- /data/data/####/e0a2ede85851c2fb546664ba5aa31f1d.0.tmp
- /data/data/####/e0a2ede85851c2fb546664ba5aa31f1d.1.tmp
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/getui_sp.xml
- /data/data/####/init.pid
- /data/data/####/init_c1.pid
- /data/data/####/jjb.db-journal
- /data/data/####/journal.tmp
- /data/data/####/julanling.db-journal
- /data/data/####/libjiagu-796197802.so
- /data/data/####/local_crash_lock
- /data/data/####/mobclick_agent_user_com.julanling.app.xml
- /data/data/####/multidex.version.xml
- /data/data/####/push.pid
- /data/data/####/pushsdk.db-journal
- /data/data/####/run.pid
- /data/data/####/security_info
- /data/data/####/sensorsdata.xml
- /data/data/####/server.json
- /data/data/####/share_prefers.xml
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/um_cache_1533950573510.env
- /data/data/####/um_cache_1533950581347.env
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/user_remind_info.xml
- /data/data/####/xsgjz.db-journal
- /data/data/####/zhgs.db-journal
- /data/media/####/.nomedia
- /data/media/####/0.338e47878dcc238aaac5.js
- /data/media/####/0.4c52ebbdf77dabfb7792.js
- /data/media/####/0.png
- /data/media/####/1.2b57e677a9aa663ceffe.js
- /data/media/####/1.b117034.png
- /data/media/####/1.e45ebd6c51b35a2af917.js
- /data/media/####/1.png
- /data/media/####/10.1653689e9d80a93a6732.js
- /data/media/####/10.bd9f0a76e70e832a64b6.js
- /data/media/####/10.fe76c9b.png
- /data/media/####/11.cb22f8268c31bd7f4e2f.js
- /data/media/####/11.e1387f34c78053efbfa2.js
- /data/media/####/12.49d2703c63056fc0e318.js
- /data/media/####/12.eeab7279ecbb683b783a.js
- /data/media/####/13.5a680648186299b4161c.js
- /data/media/####/14.1f074d9c91b325a4b7f7.js
- /data/media/####/15.77fda6042dc9f0ed6a76.js
- /data/media/####/16.d1172e8c03a582e27702.js
- /data/media/####/17.7ad5a00c09ebf09c4a2f.js
- /data/media/####/18.35a720f5e94fd85346ef.js
- /data/media/####/19.6c4654762c745680a46a.js
- /data/media/####/2.57b0627.png
- /data/media/####/2.94c82ce6b5f471baf30a.js
- /data/media/####/2.d6e0a99cd2f577960d1d.js
- /data/media/####/2.png
- /data/media/####/20.c93a0c477e1d9d4d7cf4.js
- /data/media/####/2018-08-11.log.txt
- /data/media/####/21.d5063537e118b246fc53.js
- /data/media/####/22.f3a4d5cecee6f5fc9c7e.js
- /data/media/####/23.000e458f2f2df635a1df.js
- /data/media/####/24.b8b72a7146cec6f08441.js
- /data/media/####/25.c69e9e633511f69eb82f.js
- /data/media/####/26.938dd6c022e72bafe310.js
- /data/media/####/3.1953ed12a7c66605c0ca.js
- /data/media/####/3.3fd4f19e97f1d913091c.js
- /data/media/####/3.4654053.png
- /data/media/####/3.png
- /data/media/####/4.032a9615154153419905.js
- /data/media/####/4.4b13a6b.png
- /data/media/####/4.8cbefa0d5cc67778f398.js
- /data/media/####/4.png
- /data/media/####/5.21a6f95.png
- /data/media/####/5.4555e783f5f9b241c0b8.js
- /data/media/####/5.7d9b5cc363418fb2e670.js
- /data/media/####/5.png
- /data/media/####/6.1e82b8e1879f37c51f38.js
- /data/media/####/6.7f54a3f905121e1fee21.js
- /data/media/####/6.bcc2d2f.png
- /data/media/####/6.png
- /data/media/####/7.8b9994155579facbbab3.js
- /data/media/####/7.dc40dd9.png
- /data/media/####/7.f2b14daccc6ff10630f3.js
- /data/media/####/7.png
- /data/media/####/8.0892eb50040199137bbb.js
- /data/media/####/8.1aec0fde3b5621809ff9.js
- /data/media/####/8.8a1303a.png
- /data/media/####/8.png
- /data/media/####/9.67bc299.png
- /data/media/####/9.b8ed90e33b38a7e3728a.js
- /data/media/####/9.ffcb687e0043eaa8efdd.js
- /data/media/####/9.png
- /data/media/####/Alvin2.xml
- /data/media/####/ContextData.xml
- /data/media/####/abc.html
- /data/media/####/agents-top.e3980c6.png
- /data/media/####/app.4d084c4cc8855f011b7de14f0d9448e2.css
- /data/media/####/app.8cff85764886a76c5333.js
- /data/media/####/app.a6b64561dab8e50c0e64fd834152ada5.css
- /data/media/####/app.db
- /data/media/####/app.fc4e01872495201ac494.js
- /data/media/####/banner-fu.2854607.png
- /data/media/####/base.css
- /data/media/####/bounty-bg.108f815.png
- /data/media/####/clipboard.min.js
- /data/media/####/com.igexin.sdk.deviceId.db
- /data/media/####/com.julanling.app.bin
- /data/media/####/com.julanling.app.db
- /data/media/####/comment_pre.png
- /data/media/####/default-skin.png
- /data/media/####/default-skin.svg
- /data/media/####/detail-top.7139d04.png
- /data/media/####/dsbridge.js
- /data/media/####/easemob.log
- /data/media/####/eat-stay-bg.d5414be.png
- /data/media/####/flexible.min.js
- /data/media/####/float-icon.099374e.png
- /data/media/####/fresh-b.38a69fb.png
- /data/media/####/fu-info.b37bc98.png
- /data/media/####/fu-other.3d1299d.png
- /data/media/####/fu-suc-1.dce376c.jpg
- /data/media/####/fu-suc-2.18d87db.jpg
- /data/media/####/fu-top-font-other.db48103.png
- /data/media/####/fu-top-font.50cfbcb.png
- /data/media/####/fu-top.0e7f8f9.png
- /data/media/####/guarantee.0207ca8.png
- /data/media/####/guarantee1.b6e9631.png
- /data/media/####/guarantee2.cb783ff.png
- /data/media/####/guarantee3.5c7a334.png
- /data/media/####/guarantee4.006de8c.png
- /data/media/####/holiday_list.json
- /data/media/####/home-bottom-tip.ccc9520.png
- /data/media/####/icon-hand.74a9199.svg
- /data/media/####/index.html
- /data/media/####/jjb.ico
- /data/media/####/journal
- /data/media/####/journal.tmp
- /data/media/####/latest_full.zip
- /data/media/####/manifest.31755b3052564451b74a.js
- /data/media/####/manifest.7063d94baa552281abcb.js
- /data/media/####/new-add-icon.57ec1e8.png
- /data/media/####/pkg.json
- /data/media/####/pre.png
- /data/media/####/preloader.gif
- /data/media/####/prize.abacedf.jpg
- /data/media/####/rank-banner.a1fde07.png
- /data/media/####/rob-p-b.196957b.png
- /data/media/####/sign-bg.b0260dd.png
- /data/media/####/style.min.css
- /data/media/####/swipe.min.js
- /data/media/####/sysid.dat
- /data/media/####/tbslog.txt
- /data/media/####/testIos.png
- /data/media/####/toast.1d35d43.png
- /data/media/####/vendor.29310589325cd2413132.js
- /data/media/####/vendor.397a32b66b4ced10d11a.js
- /data/media/####/video-banner.9f14cf3.jpg
- /system/bin/sh -c getprop
- /system/bin/sh -c type su
- chmod 755 <Package Folder>/.jiagu/libjiagu-796197802.so
- getprop
- getprop ro.build.version.emui
- getprop ro.build.version.opporom
- getprop ro.miui.ui.version.name
- getprop ro.product.cpu.abi
- getprop ro.smartisan.version
- getprop ro.vivo.os.version
- Bugly
- getuiext2
- hyphenate
- libjiagu-796197802
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
- RSA-NONE-OAEPWithSHA1AndMGF1Padding
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-GCM-NoPadding